---
title: "retrieve the control-plane audit log"
method: GET
path: "/mockserver/audit"
tags: ["audit"]
---

# retrieve the control-plane audit log

`GET /mockserver/audit`

## Request

- Base URL: `http://localhost:1080`
- URL: `http://localhost:1080/mockserver/audit`
- Auth: none declared

Returns the most-recent control-plane audit entries (one per authorised control-plane mutation, newest first). Off by default — enable with controlPlaneAuditEnabled. Each entry records redacted, structural metadata only (method, control-plane path with query string dropped, logical operation, source address, best-effort principal, outcome); it never contains request headers or bodies.

## Query parameters

- `limit` integer

## Response `200`

audit entries returned (newest first)

- object[]
  - `epochTimeMs` integer
  - `method` string
  - `path` string
  - `operation` string
  - `sourceAddress` string
  - `principal` string
  - `principalSource` 'jwt' | 'mtls' | 'none'
  - `outcome` string
  - `summary` string, nullable

## Other responses

- `500`: an unexpected failure inside MockServer; the error field names a correlation id for the MockServer log

---

[API](https://skmtc.dev/mock-server/apis/mockserver-api.md) · [All operations](https://skmtc.dev/mock-server/apis/mockserver-api/llms.txt) · [OpenAPI document](https://skmtc.dev/mock-server/apis/mockserver-api/revisions/9239b693996e?raw)